$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: 0YfUthOdmkUefsRyH376GDRW3bmoUDX13fSZeEbrZq4= Subject key identifier: 9E:F5:DD:9D:C8:38:DB:D7:19:9E:0F:A4:07:4B:EC:00:43:E2:B6:03 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 6DB481CA1D20604991DD487AABA3D0C07806216C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: 22 Signing time: Thu 16 Apr 2026 09:19:31 +0000 Manifest this update: Thu 16 Apr 2026 09:14:31 +0000 Manifest next update: Fri 17 Apr 2026 10:36:31 +0000 Files and hashes: 1: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) 2: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 3: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: 2ZuWo4op08SCCwSs0AZakONefP5x4WKJrInVy8XVR5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 10:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b4:81:ca:1d:20:60:49:91:dd:48:7a:ab:a3:d0:c0:78:06:21:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Apr 16 09:14:31 2026 GMT Not After : Apr 17 10:36:31 2026 GMT Subject: CN=9EF5DD9DC838DBD7199E0FA4074BEC0043E2B603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:df:95:91:3c:c6:eb:f3:d7:94:6f:ef:94: f1:e6:26:4e:67:f1:5b:9d:b4:4d:28:cf:fc:95:29: 6f:8a:cf:ac:8b:27:4d:98:da:da:f7:03:11:e7:b9: 4b:96:dd:c3:28:4e:b5:f8:7d:d3:44:fa:d7:59:89: cc:5f:64:95:2f:e2:1d:6e:9f:49:3b:2b:4b:f7:bd: 1a:5b:49:5b:1c:47:a9:28:7e:53:1b:0b:7e:e1:ec: ef:a2:60:45:dc:b7:78:61:60:d0:4e:eb:36:d4:08: 42:fe:62:98:75:44:e9:c3:dd:52:49:f4:19:1c:23: 01:40:fd:1a:f8:5b:5b:0c:e6:e3:b9:3e:e2:56:b8: 30:1e:ad:5a:0e:d9:02:66:f3:5a:e3:64:11:d6:ae: b4:f3:c9:cb:b4:71:19:02:16:20:4a:10:09:da:58: 96:0e:65:f4:6e:81:5d:93:ec:5e:70:56:84:f3:9c: 69:cd:ea:d6:f8:0d:9b:91:59:8e:f6:f2:a5:f9:b1: a3:ab:d9:73:8a:a2:55:6c:7f:e5:c4:ab:15:07:2d: f3:16:a6:46:16:be:a4:60:f5:88:89:ff:f4:ae:1e: c7:31:ab:6e:b7:62:7c:43:84:97:7c:a5:42:1a:71: 80:ef:50:4b:f8:8c:c6:83:8a:94:ae:e2:90:6e:cb: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F5:DD:9D:C8:38:DB:D7:19:9E:0F:A4:07:4B:EC:00:43:E2:B6:03 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b6:69:11:30:b9:3a:49:06:f7:40:eb:55:77:c0:86:cd:8b: 04:14:bf:d1:ee:cd:26:b7:28:9b:d9:6b:6e:15:e3:0b:b9:4c: 85:94:f7:76:b6:dd:a7:a4:ff:02:c9:19:d8:aa:d6:4d:e9:7d: e1:5e:3d:55:3c:98:bf:69:a4:86:bb:30:ee:f3:3b:97:a1:f8: 64:47:d0:9e:21:90:77:c8:6e:6b:5b:44:8d:fa:85:8e:41:ec: 37:94:7d:0b:bb:24:34:cf:d3:9f:2b:4b:2d:25:33:72:85:1c: e7:76:80:85:a6:8f:c3:1d:6b:eb:83:99:17:b7:e4:36:88:ae: 02:3d:4b:18:2f:6d:18:67:50:56:b7:e3:dd:67:5a:57:91:0c: 82:eb:52:76:61:c0:42:4b:be:1c:2a:0e:8d:c2:d5:64:4d:ef: 69:ee:fe:86:8f:b0:9b:cc:1f:c3:46:cc:1e:e8:7f:f1:d4:7d: f2:89:e1:42:ee:96:c2:5b:60:cf:d3:99:06:c2:b3:cd:35:af: 0c:33:07:63:ee:ba:fb:f0:dd:8f:2d:0b:85:e4:90:8e:d6:5a: e8:65:0d:e1:10:be:ed:4c:9d:f1:4a:a9:93:bc:16:95:1f:a3: ce:9e:68:98:76:a2:d9:3c:ea:15:97:ea:f4:e3:14:cf:66:fa: 5a:28:f9:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbbSByh0gYEmR3Uh6q6PQwHgGIWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA0MTYwOTE0MzFaFw0yNjA0MTcxMDM2MzFaMDMxMTAvBgNV BAMTKDlFRjVERDlEQzgzOERCRDcxOTlFMEZBNDA3NEJFQzAwNDNFMkI2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNd+VkTzG6/PXlG/vlPHmJk5n 8VudtE0oz/yVKW+Kz6yLJ02Y2tr3AxHnuUuW3cMoTrX4fdNE+tdZicxfZJUv4h1u n0k7K0v3vRpbSVscR6koflMbC37h7O+iYEXct3hhYNBO6zbUCEL+Yph1ROnD3VJJ 9BkcIwFA/Rr4W1sM5uO5PuJWuDAerVoO2QJm81rjZBHWrrTzycu0cRkCFiBKEAna WJYOZfRugV2T7F5wVoTznGnN6tb4DZuRWY728qX5saOr2XOKolVsf+XEqxUHLfMW pkYWvqRg9YiJ//SuHscxq263YnxDhJd8pUIacYDvUEv4jMaDipSu4pBuy0HXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnvXdncg429cZng+kB0vsAEPitgMwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILZpETC5OkkG 90DrVXfAhs2LBBS/0e7NJrcom9lrbhXjC7lMhZT3drbdp6T/AskZ2KrWTel94V49 VTyYv2mkhrsw7vM7l6H4ZEfQniGQd8hua1tEjfqFjkHsN5R9C7skNM/TnytLLSUz coUc53aAhaaPwx1r64OZF7fkNoiuAj1LGC9tGGdQVrfj3WdaV5EMgutSdmHAQku+ HCoOjcLVZE3vae7+ho+wm8wfw0bMHuh/8dR98onhQu6Wwltgz9OZBsKzzTWvDDMH Y+66+/Ddjy0LheSQjtZa6GUN4RC+7Uyd8Uqpk7wWlR+jzp5omHai2TzqFZfq9OMU z2b6Wij5Jw== -----END CERTIFICATE-----Generated at Fri Apr 17 04:00:18 2026 by rpki-client